configure: gcov should not exclude fortify-source